From 94a2bd648c5a98e98444439799405ae3d35c2d95 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Wed, 15 Jul 2026 21:36:05 -0700
Subject: [PATCH] fix: remove kubeconfig references, use try() for pod runtime
 files

- main.tf: remove kubeconfig_path local (no longer used with direct auth)
- providers.tf: wrap file() with try() to handle plan-time on non-pod systems

try() allows terraform plan to work locally; at runtime in pod, files exist and are used.
---
 terraform/main.tf      | 3 +--
 terraform/providers.tf | 8 ++++----
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/terraform/main.tf b/terraform/main.tf
index 9ce8fb9..8f2475e 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -1,6 +1,5 @@
 locals {
-  kubeconfig_path = var.kubeconfig_path
-  cluster_domain  = var.cluster_domain
+  cluster_domain = var.cluster_domain
 }
 
 # Helm repositories will be created in helm-repositories.tf
diff --git a/terraform/providers.tf b/terraform/providers.tf
index c4a895c..8dbb041 100644
--- a/terraform/providers.tf
+++ b/terraform/providers.tf
@@ -30,16 +30,16 @@ terraform {
 
 provider "kubernetes" {
   host                   = "https://kubernetes.default"
-  token                   = file("/var/run/secrets/kubernetes.io/serviceaccount/token")
-  cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt")
+  token                  = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
+  cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
   insecure               = false
 }
 
 provider "helm" {
   kubernetes {
     host                   = "https://kubernetes.default"
-    token                   = file("/var/run/secrets/kubernetes.io/serviceaccount/token")
-    cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt")
+    token                  = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
+    cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
     insecure               = false
   }
 }